Brocade BigIron RX Series Configuration Guide - Manual (Page 1121)

BigIron RX Series Configuration Guide 1043
53-1002484-04
Transparent port flooding
33
Displaying information when violation action is deny
To determine what MAC addresses have been denied at the global level when violation action is set
to deny, enter the following command.
Syntax: show port security global-deny
Transparent port flooding
When the transparent port flooding feature in enabled for a interface, all MAC learning will be
disabled for that interface. This will result in all Layer 2 traffic to be flooded to all other interfaces
within the VLAN. The Transparent port flooding feature is disabled by default. To enable
Transparent port flooding, enter a command such as the following:
BigIron RX(config-if-e1000-15/8)mac-learn-disable
Syntax: [no] mac-learn-disable
Displaying transparent port flooding status
To display if the transparent port flooding feature has been enabled, issue the show interface
ethernet <interface> or show running-configuration command.
10.45.48.50(config-if-e1000-15/8)# mac-learn-disable
10.45.48.50(config-if-e1000-15/8)# show interface ethernet 15/8
GigabitEthernet15/8 is down, line protocol is down
Hardware is GigabitEthernet, address is 0004.1234.ffff (bia 0004.1234.ffff)
Configured speed 1Gbit, actual unknown, configured duplex fdx, actual unknown
Configured mdi mode AUTO, actual unknown
Member of L2 VLAN ID 1, port is untagged, port state is Disabled
STP configured to ON, Priority is level0, flow control enabled
Force-DSCP disabled
Age How long the address has been denied access to the interface.
Age left Amount of time left before the address ages out. After the age timer expires
MAC address is removed from the deny list.
TABLE 170 Output from the show port security global-deny command
This field... Displays...
Count The total number of times the MAC address was received on the device.
Deny-Src-Addr The denied MAC address that was received on the interface.
VLAN The VLAN on which the denied MAC address was received.
TABLE 169 Output from the show port security denied-macs command (Continued)
This field... Displays...
BigIron RX# show port security global-deny
Global deny is enabled. Configured macs/Max macs = 1/512
Count Deny-Addr Vlan
----- ------------------ ----
1 0030.0000.00a2 1200